This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/323830333a353639303a3a2f33322d3334203d3e20323732393031.roa
File: 323830333a353639303a3a2f33322d3334203d3e20323732393031.roa (raw, json)
Hash identifier: B6zpRXUx/ft3hSxUvrTph4pFSeedEjOGgicVsEqnB/4=
Subject key identifier: 3D:FB:5C:75:7B:25:27:8D:E8:5C:3E:D5:FC:8E:FD:E6:5F:AF:41:5B
Certificate issuer: /CN=4521828D1C18DA1589E0C8194C700625665277B2
Certificate serial: 7D1AE06FF9353711E2DE87BE3F126D875989A92F
Authority key identifier: 45:21:82:8D:1C:18:DA:15:89:E0:C8:19:4C:70:06:25:66:52:77:B2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/323830333a353639303a3a2f33322d3334203d3e20323732393031.roa
Signing time: Tue 06 Jan 2026 19:17:37 +0000
ROA not before: Tue 06 Jan 2026 19:12:37 +0000
ROA not after: Tue 05 Jan 2027 19:17:37 +0000
asID: 272901
IP address blocks: 2803:5690::/32 maxlen: 34
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.crl
rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 11:14:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:1a:e0:6f:f9:35:37:11:e2:de:87:be:3f:12:6d:87:59:89:a9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4521828D1C18DA1589E0C8194C700625665277B2
Validity
Not Before: Jan 6 19:12:37 2026 GMT
Not After : Jan 5 19:17:37 2027 GMT
Subject: CN=3DFB5C757B25278DE85C3ED5FC8EFDE65FAF415B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:82:64:ed:7a:95:1f:05:e2:64:f2:53:2e:
9a:f7:1a:d6:b0:02:78:89:2a:b3:c6:79:9f:79:bc:
85:4f:f7:56:82:2f:13:bd:be:00:36:b2:0f:6b:6c:
6a:3c:2c:61:58:c0:0d:44:c2:56:f9:20:a2:05:2a:
2c:20:a2:b9:4c:69:67:9f:9b:5b:14:a3:eb:31:51:
85:3c:4a:6e:6c:a2:11:14:92:ab:c0:04:38:85:60:
ad:46:70:26:ce:a4:0b:fa:33:03:10:34:72:2e:89:
c1:1f:9b:aa:6a:64:4e:fa:0e:10:96:83:50:a0:30:
51:8c:20:6c:cf:cd:14:36:80:6a:3e:18:fe:5b:54:
ba:9b:5c:be:df:b6:28:93:67:3a:35:e2:5a:15:ee:
1b:ce:0d:b5:a1:6d:7b:6f:32:6f:e2:63:e2:e7:f4:
30:6c:60:3d:7d:6d:f7:30:f2:5e:27:67:9b:fb:ce:
14:49:e8:56:4a:c7:46:cf:4c:2a:d2:9a:62:bf:c8:
5c:03:f8:3c:77:9b:7b:8c:c2:59:5d:3c:fb:52:f7:
35:e1:a1:2d:40:c8:95:fe:2b:10:d9:0c:f3:a0:32:
20:cb:92:30:fa:11:cb:60:4d:f7:34:01:7d:42:95:
43:13:66:0f:29:72:3d:48:1b:95:98:28:ba:75:91:
8e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FB:5C:75:7B:25:27:8D:E8:5C:3E:D5:FC:8E:FD:E6:5F:AF:41:5B
X509v3 Authority Key Identifier:
keyid:45:21:82:8D:1C:18:DA:15:89:E0:C8:19:4C:70:06:25:66:52:77:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/4521828D1C18DA1589E0C8194C700625665277B2.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4521828D1C18DA1589E0C8194C700625665277B2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF43310394D24BDA20D8C74A6CAF8FB10C4C927DA2515C302D826FB008CFFFA2/0/323830333a353639303a3a2f33322d3334203d3e20323732393031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:5690::/32
Signature Algorithm: sha256WithRSAEncryption
be:b7:7b:c3:5a:1c:69:85:28:b7:60:4f:db:62:c9:36:c2:b9:
0f:20:80:4c:24:f2:2b:01:d1:29:57:61:d6:93:89:da:ac:da:
23:e1:1c:29:c6:42:9f:fb:78:1b:ec:5a:08:be:c2:4c:87:ed:
06:22:c4:9b:ed:f8:90:6f:8f:78:36:e0:58:fe:23:6f:d5:c9:
72:17:c7:d6:c1:d3:c7:d5:8a:3d:f6:a5:cd:a2:c5:41:4b:5a:
7f:70:54:50:61:4d:1b:4c:80:49:b2:c4:0e:a2:ed:51:c2:4c:
94:d9:dc:fa:69:66:53:63:cd:6c:71:32:8d:c1:ca:77:e9:45:
d1:16:9a:12:b6:95:ac:2e:2b:5a:e8:16:6f:af:db:c4:5d:a5:
b8:3f:a6:99:79:e0:52:65:9f:58:46:ba:08:e4:56:0b:27:82:
d7:ad:17:c7:29:97:de:f6:71:86:2e:92:0c:93:d9:1b:c8:0c:
8f:ee:ea:78:99:62:82:53:be:28:2f:2f:f8:d3:0e:ba:fa:aa:
20:b6:3e:3c:2f:6f:17:c5:5d:c2:b1:d1:ac:c6:ae:66:c8:28:
57:4e:e5:56:ac:21:ec:28:e2:ee:e1:b0:78:aa:8c:12:16:7f:
c5:b2:a5:07:7e:41:1d:b4:89:87:9e:ee:d9:00:34:38:31:2a:
c1:7e:75:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:02:27 2026 by rpki-client